When str.lower() is a security vulnerability in Python – Seth Larson
Some internet standards only support ASCII characters, but the world uses
much more than the Latin alphabet. Thus, a mapping from Unicode to
ASCII for use in domain names is required.
NamePrep was...
much more than the Latin alphabet. Thus, a mapping from Unicode to
ASCII for use in domain names is required.
NamePrep was...
Summary
The article discusses how Python’s str.lower() function can lead to security vulnerabilities due to its handling of Unicode characters in domain names. It highlights the importance of proper character mapping to prevent potential exploits in systems that rely on ASCII standards.
Comments (69 of ) ⌛